Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/AS214556.asa
File:                     AS214556.asa (raw, json)
Hash identifier:          Aw9l9ZYJmTa2uMEPW4o4hfRmjL05atwpZnEolAWMcWc=
Subject key identifier:   1D:A8:17:EB:F0:BD:B1:E4:89:B1:33:95:7D:6A:5A:26:5D:7C:8A:37
Certificate issuer:       /CN=31a97b97cb23bcca5d187f8e2bd8faaa03b98d6f
Certificate serial:       3331E5364F93EBB7F4F129F90A2E51ED093F67F1
Authority key identifier: 31:A9:7B:97:CB:23:BC:CA:5D:18:7F:8E:2B:D8:FA:AA:03:B9:8D:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mal7l8sjvMpdGH-OK9j6qgO5jW8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/AS214556.asa
Signing time:             Tue 09 Jun 2026 20:44:09 +0000
ASPA not before:          Tue 09 Jun 2026 20:39:09 +0000
ASPA not after:           Tue 08 Jun 2027 20:44:09 +0000
Customer ASID:            214556
Providers:                AS: 6939
                          AS: 11967
                          AS: 20473
                          AS: 34927
                          AS: 197071
                          AS: 207841
                          AS: 209735
                          AS: 212895
                          AS: 216078
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mal7l8sjvMpdGH-OK9j6qgO5jW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:31:e5:36:4f:93:eb:b7:f4:f1:29:f9:0a:2e:51:ed:09:3f:67:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a97b97cb23bcca5d187f8e2bd8faaa03b98d6f
        Validity
            Not Before: Jun  9 20:39:09 2026 GMT
            Not After : Jun  8 20:44:09 2027 GMT
        Subject: CN=1DA817EBF0BDB1E489B133957D6A5A265D7C8A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:b0:6c:74:e0:c8:56:31:1b:02:85:b4:46:
                    70:9e:16:df:6f:6e:23:eb:fa:43:8c:70:6c:54:e0:
                    ef:5f:ce:bf:7f:85:9e:e1:5b:30:cd:8c:b8:40:62:
                    6e:3f:8d:b0:49:c4:5a:e9:1e:d5:4b:2f:e7:c0:36:
                    5d:3c:9b:4f:cd:d5:5e:34:90:f0:4b:b3:c4:b8:b0:
                    99:19:e7:af:93:0c:ce:f6:1c:23:6f:b6:e3:08:d2:
                    c3:9c:c4:3b:b6:2a:fc:a2:f0:8c:a8:8e:fa:99:71:
                    fa:79:05:df:3a:8d:ac:eb:e1:47:b8:4a:cc:1f:ea:
                    00:8b:da:8d:a7:99:c4:02:5e:8a:8a:02:c5:45:4e:
                    c7:11:7b:42:8f:0d:51:db:2f:46:29:8a:d0:43:7f:
                    82:4b:13:24:87:1c:df:e2:e0:b5:63:ba:87:94:c9:
                    9c:ee:5c:f3:36:e2:64:3a:eb:ba:d0:21:34:6c:42:
                    9f:39:04:86:a7:05:6d:e0:39:dc:fe:7a:1b:eb:cc:
                    20:e4:7a:0f:d3:4b:fc:cf:50:eb:01:75:ce:b8:74:
                    bd:66:cc:16:9f:55:9d:20:35:fa:09:92:67:d0:b8:
                    39:7d:0b:6b:53:ec:95:8c:5d:95:6f:81:50:40:6d:
                    ac:9d:b8:f9:08:29:0f:43:41:1a:c6:b6:8d:29:5a:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A8:17:EB:F0:BD:B1:E4:89:B1:33:95:7D:6A:5A:26:5D:7C:8A:37
            X509v3 Authority Key Identifier:
                keyid:31:A9:7B:97:CB:23:BC:CA:5D:18:7F:8E:2B:D8:FA:AA:03:B9:8D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/31A97B97CB23BCCA5D187F8E2BD8FAAA03B98D6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mal7l8sjvMpdGH-OK9j6qgO5jW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8c7e6d88-0b39-4b65-937a-b10042540b7b/0/AS214556.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214556

    Signature Algorithm: sha256WithRSAEncryption
         6b:b0:5d:93:7b:f0:63:c0:49:86:47:02:71:21:ae:0e:52:0b:
         be:e5:4b:39:f8:e2:f7:b4:45:e4:b9:31:b4:6b:11:15:41:a8:
         d1:c2:45:cb:49:a8:e3:22:e3:b0:dd:03:04:a1:4e:4a:57:b4:
         18:35:9f:7f:77:69:ae:b9:f3:f6:b7:05:d9:5f:c4:82:8d:78:
         17:74:3d:e4:c5:82:86:13:a4:c6:ae:c2:f7:05:8b:e0:04:33:
         8a:81:90:58:2e:22:b6:94:85:6f:65:c7:59:db:24:59:16:4b:
         8e:8d:83:1d:28:ba:cc:8f:a3:3c:1d:5b:33:9e:e1:79:c3:e0:
         c3:b4:c6:84:a8:9b:ee:cb:02:05:f3:8a:ad:ac:f3:b9:6b:a8:
         a1:8e:04:da:c1:0d:13:99:c4:cc:af:c3:17:8b:9a:99:8d:a2:
         04:92:24:0c:a0:9f:70:02:23:13:9c:61:77:32:5e:e2:9d:28:
         b4:d5:86:d8:84:d8:16:9a:a1:75:b3:3e:79:1f:f2:7d:13:f2:
         33:7d:bf:44:92:ad:c1:fa:7a:c3:dc:ef:91:18:6c:79:7f:4f:
         59:f7:c2:2a:47:71:bb:e8:82:cf:f8:84:77:6c:5c:32:bb:7b:
         d8:ed:0e:60:40:ae:a3:a7:69:b8:c0:0b:e6:7f:d7:24:7c:8c:
         13:f0:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:14 2026 by rpki-client